CVE-2025-38074

creationtimestamp| type| source ---|---|--- 2025-06-18 10:40:04+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18707 2025-06-18 10:50:04+00:00| seen| https://infosec.exchange/users/vuldb/statuses/114703977953402514 2025-06-18 11:36:44+00:00| seen|...

CVE-2025-43200

This issue was addressed with improved checks. This issue is fixed in watchOS 11.3.1, macOS Ventura 13.7.4, iOS 15.8.4 and iPadOS 15.8.4, iOS 16.7.11 and iPadOS 16.7.11, iPadOS 17.7.5, visionOS 2.3.1, macOS Sequoia 15.3.1, iOS 18.3.1 and iPadOS 18.3.1, macOS Sonoma 14.7.4. A logic issue existed...

Astra Linux – Vulnerability in Linux 6.12

In the Linux kernel, the following vulnerability has been resolved: x86/resctrl: Fixed the allocation of the cleanest CLOSID on platforms without monitors. Commit: 6eac36bb9eb0 “x86/resctrl: Allocate the cleanest CLOSID by searching for the CLOSID with the fewest dirty cache lines” Added logic th...

CVE-2025-25264

creationtimestamp| type| source ---|---|--- 2025-06-16 10:33:51+00:00| seen| Telegram/rWCmDShs9kyN-Ac2IJ6oBoNksY3QzSzid5WB25gwynslFg 2025-06-16 10:39:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18437 2025-06-16 10:50:27+00:00| seen|...

CVE-2025-2091

An open redirection vulnerability in M-Files mobile applications for Android and iOS prior to version 25.6.0 allows attackers to use maliciously crafted PDF files to trick other users into making requests to untrusted URLs...

CVE-2025-5964

creationtimestamp| type| source ---|---|--- 2025-06-15 20:39:24+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/18386 2025-06-15 21:00:28+00:00| seen| Telegram/qqGdRq3IEZWlesNnwy1ijPtikCMQVd1aEhfCMytKb8KLZk 2025-06-15 21:06:26+00:00| seen|...

Social Media Is Now a DIY Alert System for ICE Raids

The undocumented migrant community in the United States is using social networks and other digital platforms to send alerts about raids and the presence of immigration agents around the US...

VulnCheck KEV: CVE-2025-43200

Apple iOS, iPadOS, macOS, watchOS, and visionOS, contain an unspecified vulnerability when processing a maliciously crafted photo or video shared via an iCloud Link...

Researchers Uncover 20+ Configuration Risks, Including Five CVEs, in Salesforce Industry Cloud

Cybersecurity researchers have uncovered over 20 configuration-related risks affecting Salesforce Industry Cloud aka Salesforce Industries, exposing sensitive data to unauthorized internal and external parties. The weaknesses affect various components like FlexCards, Data Mappers, Integration...

CVE-2025-33070

creationtimestamp| type| source ---|---|--- 2025-06-10 15:24:53+00:00| seen| https://www.thezdi.com/blog/2025/6/10/the-june-2025-security-update-review 2025-06-10 19:20:34+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3lrbmfmeu2f2u 2025-06-10 19:44:10+00:00| seen|...

PT-2025-23952

Name of the Vulnerable Software and Affected Versions Linux kernel affected versions not specified Envoy side-cars affected versions not specified Description A flaw exists in the Linux kernel related to insufficient validation of extensible ioctls within the pidfs subsystem. This could potential...

Cisco Identity Services Engine on Cloud Platforms Static Credential Vulnerability

A vulnerability in Amazon Web Services AWS, Microsoft Azure, and Oracle Cloud Infrastructure OCI cloud deployments of Cisco Identity Services Engine ISE could allow an unauthenticated, remote attacker to access sensitive data, execute limited administrative operations, modify system configuration...

CVE-2025-48960

CVE-2025-48960 concerns a weak server key used for TLS encryption affecting Acronis Cyber Protect 16 on Linux, macOS, and Windows before build 39938 . The vulnerability is caused by inadequate key material in the TLS setup, leading to low confidentiality (C) and partial integrity issues (I) per t...

CVE-2025-48960

Weak server key used for TLS encryption. The following products are affected: Acronis Cyber Protect 16 Linux, macOS, Windows before build 39938...

CVE-2025-5601

creationtimestamp| type| source ---|---|--- 2025-06-04 11:49:09+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqrqejjhuig2 2025-06-04 12:06:28+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114625005980230275 2025-06-04...

Europol Targets Over 2,000 Extremist Links Exploiting Minors Online

Europol targets extremist online content exploiting minors, tackling rising use of AI, propaganda, and grooming across Europe’s digital platforms...

CVE-2024-36486

creationtimestamp| type| source ---|---|--- 2025-06-03 10:00:19+00:00| seen| https://infosec.place/objects/0b9f0dc9-f468-4b15-a796-956e279da8a4 2025-06-03 10:06:06+00:00| seen| https://bsky.app/profile/buherator.bsky.social/post/3lqp25ovz6r2p 2025-06-03 10:23:15+00:00| seen|...

The vulnerability of the GrantAccessToMultipleFiles interface in the Core Services framework of operating systems macOS, iOS, iPadOS, and tvOS allows a perpetrator to bypass the sandbox protection mechanisms and gain unauthorized access to protected information.

The vulnerability of the GrantAccessToMultipleFiles interface in the Core Services framework of operating systems macOS, iOS, iPadOS, and tvOS is related to insufficient protection of service data. Exploiting this vulnerability can allow attackers to bypass the sandbox protection mechanisms and...

GHSA-W6Q7-J642-7C25

creationtimestamp| type| source ---|---|--- 2025-05-30 18:15:52+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114598146975884055 2025-05-30 18:16:52+00:00| seen| https://bsky.app/profile/bluesky.awakari.com/post/3lqftpll67w22...

CVE-2025-4967

creationtimestamp| type| source ---|---|--- 2025-05-29 20:55:32+00:00| seen| https://infosec.exchange/users/cR0w/statuses/114593112438215240 2025-05-29 21:06:08+00:00| seen| https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lqdmogjodng2 2025-05-29...